sign artifacts only on release